Hello,

When using Wireshark, have you tried a right-click on flows supposed to be
IPFIX and select the option "Decode As".
You'll have a list of protocols that Wireshark is able to decode.
Select CFLOW decoder and see if it still cannot detect IPFIX flows.
Try to update Wirehark to the new version if it is not working.

About your Nortel troubles, I can't help as I'm not using them.
have a good day

--
SB


                                                                           
             Jean-baptiste                                                 
             Fuzier                                                        
             <Jean-baptiste.Fu                                           A 
             [email protected]         "[email protected]"         
             >                         <[email protected]>         
             Envoyé par :                                               cc 
             ntop-bounces@list                                             
             gateway.unipi.it                                        Objet 
                                       [Ntop] Ntop and Avaya/Nortel IPFIX  
                                       implementation                      
             15/06/2011 15:02                                              
                                                                           
                                                                           
             Veuillez répondre                                             
                     à                                                     
               [email protected]                                               
                                                                           
                                                                           




Hello,

I am currently working on a project involving LAN traffic monitoring using
our Nortel Switches (ERS5000 and 4500). I noticed that when using Ntop as
the Netflow collector, the amount (in size) of traffic seen by Ntop is
nothing near reality… (I am also testing a commercial product which seems
to work fine while yet another commercial product gives me the same
information as Ntop..). Is something wrong with Nortel’s IPFIX
implementation? Wireshark is not able to understant the IPFIX messages, but
I do not know if there is an IPFIX dissector embedeed in Wireshark and if
it is able to see the IPFIX template in the capture and use it…

Thanks in advance for your help,
Regards

--
Jean Baptiste Fuzier_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop

Accédez aux meilleurs tarifs Air France, gérez vos réservations et 
enregistrez-vous en ligne sur  http://www.airfrance.com  
Find best Air France fares, manage your reservations and check in online at  
http://www.airfrance.com  Les données et renseignements contenus dans ce 
message peuvent être de nature confidentielle et soumis au secret professionnel 
et sont destinés à l'usage exclusif du destinataire dont les coordonnées 
figurent ci-dessus. Si vous recevez cette communication par erreur, nous vous 
demandons de ne pas la copier, l'utiliser ou la divulguer. Nous vous prions de 
notifier cette erreur à l'expéditeur et d'effacer immédiatement cette 
communication de votre système. Société Air France - Société anonyme au capital 
de 1 901 231 625 euros - RCS Bobigny (France) 420 495 178 - 45, rue de Paris, 
95 747 Roissy CDG CEDEX  
The data and information contained in this message may be confidential and 
subject to professional secrecy and are intended for the exclusive use of the 
recipient at the address shown above. If you receive this message by mistake, 
we ask you not to copy, use or disclose it. Please notify this error to the 
sender immediately and delete this message from your system. Société Air France 
- Limited company with capital of 1,901,231,625 euros - Bobigny register of 
companies (France) 420 495 178 - 45, rue de Paris, 95 747 Roissy CDG CEDEX  
Pensez à l'environnement avant d'imprimer ce message.  
Think of the environment before printing this mail.   

<<inline: graycol.gif>>

<<inline: pic24474.gif>>

<<inline: ecblank.gif>>

_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop

Reply via email to